Log in to Plesk.
Go to Domains > example.com > IIS Settings:
Switch the Deny access to the site directive to the Enter custom value option:
Specify the IP addresses which have to be blocked in the first field and add IP addresses which have to be allowed to access the website in the second field:
Click OK to apply changes.